Technology Services Lead – GBS IND

Job Description:

About Us

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations.

Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation.

In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview

Core Technology Infrastructure part of the Global Technology & Operations organization consists of more than 6,600 employees worldwide. With a presence in more than 35 countries, CTI designs, builds, and operates end-to-end technology infrastructure solutions and manages critical systems and platforms across the bank. CTI delivers industry-leading infrastructure products and services to the company’s employees, customers, and clients around the world.

Job Description

We are seeking a talented and experienced senior Key Management system (KMS) Administrator to design, implement, manage, and maintain our organizations Key management infrastructure. The successful candidate will have strong background in Key management, HSMs and cloud security. This role will oversee the entire key lifecycle, ensure secure key storage and collaboration with stakeholders to identify and prioritize key management requirements. Work closely with our engineering, operations, and security teams to design, implement, and maintain highly available and performant KMS solutions.​

Responsibilities

• Develop and implement key management strategy aligned with industry standards and best practices.
• Administer and maintain the KMS platform, ensuring its availability, security, and performance.
• Ensure compliance with relevance regulatory requirements and industry standards and identify and mitigate the key management-related risks.
• Mentors other team members and provides technical leadership
• Collaborate with Engineering and develop or maintain scripts to automate the key management tasks, monitoring etc.
• Ensure that all the key managements activities are monitored, and the logs are being reviewed periodically
• Collaborate with other teams such as networks, IT security and compliance, Engineering, and stakeholders to ensure alignment and effective key management. Communicate key management plans, policies, and procedure to stakeholders.
• Manage the entire key lifecycle and ensure secure key storage, backup, and recovery processes.
• Stay up to date with industry standards, best practices, and emerging technologies in key management.
• Supports change implementations, proactively identifies and resolves potential issues resulting from the changes and performs access and/or physical provisioning/deprovisioning (additions, modifications, and deletions) for infrastructure and applications. ensure the changes are properly documented and communicated to stakeholders.
• Manage the lifecycle of the SSL certificate including installation and renewal. Monitor on the certificate expiration and renewal.
• Respond to and manage key management related incidents, such as key compromises or certificate expiration or other issues, co-ordinate with stake holders to resolve incidents and minimize impact. Also, document and report on incidents including root cause analysis and lessons learned.
• Provides consulting services to Core Technology Infrastructure (CTI) and technical partners, executes procedures reliably, and escalates appropriately to solve incidents quickly
• Monitor and optimize the performance and scalability of KMS Infrastructure.

Requirements

Education: Bachelor’s degree in engineering, computer science

Certifications If any – NA

Experience Range: 8 to 12 years.

Foundational Skills

• Primary Skills: Cryptography, Thales HSM, Cipher Trust Manager, Linux, Scripting, Cloud KMS
• Strong knowledge on cryptography algorithms, protocols, and techniques.
• Understanding of KMS concepts, architecture, and best practices.
• Hands on experience working on Linux/Unix and/or Windows server platforms.
• Strong understanding of cryptographic principles and key management best practices.
• 2+ years hands on experience on Thales HSM or Cipher Trust Manager and their configurations.
• Proficiency in scripting languages such as python, PowerShell and Bash.
• Experience with key management systems such as AWS KMS, Azure Key Vault, or Google Cloud KMS.
• Additionally having knowledge in API calls on Thales HSM or Cipher trust manager.
• Ability to analyze complex technical problems and identify solutions.
• Excellent troubleshooting and problem-solving skills.
• Strong communication and interpersonal skills.
• Familiarity of Incident and Problem Management systems like Remedy or ServiceNow.
• Ability to work independently and as part of a team in a fast-paced environment.
• Knowledge on security standards and regulations. Eg: PCI-DSS, HIPAA

Desired Skills

• Experience with Key management systems and HSM (e.g. the product from Thales, Entrust, Vormetric, etc.)
• Experience with industry monitoring tools like Splunk, etc.
• Experience in JIRA, confluence.
• Ability to quickly learn new technologies.
• Basic knowledge on networking protocols such as TCP/IP, DNS and DHCP.
• Familiarity with API calls.
• Prior experience with Operating critical Infrastructure or Application environments
• Ability to communicate technical concepts to non-technical stakeholders.
• Familiarity with cloud based key management systems such as AWS KMS, etc.
• Stakeholder management
• Certifications on AWS certified security, Red Hat, CISSP.

Work Timings* (IST – 9 hrs shift)

6:30 am – 10:30 pm (weekdays) any 9 Hours: Weekend: Rotational support 16*7 support

Shift: Morning or Afternoon

Job Location         

Chennai